CVE-2025-27648

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

🚨 A critical vulnerability in Vasion Print could expose tenant passwords like forgotten notes left on a cafe table. 🔥 Imagine a busy coffee shop where patrons accidentally swap their notebooks, revealing sensitive information to anyone who glances over — that's how passwords can be carelessly exposed across different tenants in this flaw. An attacker could exploit this vulnerability to gain access to sensitive passwords from other tenants, potentially leading to account takeovers and unauthorized access to critical data. This kind of breach can have devastating consequences, putting not just one organization at risk, but potentially many. Security hero status: activated!

Put simply

Imagine a busy coffee shop where patrons accidentally swap their notebooks, revealing sensitive information to anyone who glances over — that's how passwords can be carelessly exposed across different tenants in this flaw. This Cross Tenant Password Exposure vulnerability in Vasion Print allows unauthorized users to access passwords belonging to other tenants due to insufficient isolation between them.

What to do

An attacker could exploit this vulnerability to gain access to sensitive passwords from other tenants, potentially leading to account takeovers and unauthorized access to critical data. This kind of breach can have devastating consequences, putting not just one organization at risk, but potentially many. Security hero status: activated! To remediate this vulnerability, update Vasion Print to version 20.0.2254 or later immediately. Additionally, review account isolation practices to enhance security measures and ensure tenant data remains compartmentalized. You've got this! Follow these steps and you'll be safeguarding your network in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003
    cvelistv5